d7e48091ca
Adds password_login and logout to swarm-matrix-client and deletes the controller's private copies, with their own timeouts and error text.
1.1 KiB
swarm-matrix-client
The appservice calls against the swarm's homeserver, shared by the two binaries
that make them: swarm-matrix-ctl (inside the matrix container, for a hive's
sender account) and swarm-controller (for each agent's account, with the
swarm's own appservice token).
Three calls, all client-server API: register an account as the appservice, log
in to an existing one as the appservice, and ask a token who it is. Both mints
pin the device id hyperhive-<localpart>, so a second login replaces that
device's token instead of adding a device.
swarm-controller also logs an operator-linked account in with its password
(password_login) and invalidates its token (logout) on whatever homeserver
the operator names. Neither call is an appservice call, so neither carries the
appservice token.
🩸 A secret is a path, never a value
Every error here is built from the response's status and its errcode, never
its body: a successful /register or /login body is an access token, and an
error body is one malformed response away from being the same bytes.